How to migrate from legacy LAPS (LeanLAPS) to Entra LAPS

Question

How to migrate from legacy LAPS (LeanLAPS) to Entra LAPS

Shaun Slater 61

Hello, I would like some advice on moving away from the legacy LAPS solution to the now natively supported one that comes bundled with Microsoft Entra. Entra seems to be the way forward and it looks a lot simpler but like anything we would like to test before we transition and have both running side-by-side before we eventually cut the legacy LAPS.

I can't find an official document from Microsoft on how to best achieve this but would be good if someone else with experience can help us with this migration.

Also the LAPS solution we have built is the scripted one that we set up a simple remediation script in Intune to rotate the device administrator password.

https://www.lieben.nu/liebensraum/2021/06/lightweight-laps-solution-for-intune-mde/

Thanks so much in advance and hope that this does not sound too complicated. Regards, Shaun

Shaun Slater 61 Reputation points

2024-02-07T09:54:07.7+00:00

Also the LAPS solution we have built is the scripted one that we set up a simple remediation script in Intune to rotate the device administrator password. Similar to https://www.lieben.nu/liebensraum/2021/06/lightweight-laps-solution-for-intune-mde/
JM 1,161 Reputation points

2024-02-07T12:49:01.34+00:00

Thats correct, Windows LAPS solution via Entra / Intune is the best way forward. I have Implemented it in my multiple organizations and since now its in use and helps us rotate local admin passwords automatically. No need for any scripts, its natively deployed via Intune. I have created a Step-by-step deployment guide on Windows LAPS impementation if it helps: https://cloudinfra.net/implement-laps-with-intune-a-comprehensive-guide/
Shaun Slater 61 Reputation points

2024-02-07T16:45:25.4033333+00:00

Hi Jatin I have read your step-by-step and it looks good but it does not mention what the steps are if we wish to go from LAPS script to LAPS Intune. Do you mind updating the guide or answering on here how we can go from one system to another and test as we go?
Crystal-MSFT 53,241 Reputation points Microsoft External Staff

2024-02-12T05:27:15.11+00:00

@Shaun Slater, Hope things are going well. I am writing to see if the suggestion provide by JatinMakhija can help. If the answer is helpful, please click "Accept Answer". Thanks!

Accepted answer

0 additional answers

Your answer

Shaun Slater 61 Reputation points

2024-02-07T09:54:07.7+00:00

Also the LAPS solution we have built is the scripted one that we set up a simple remediation script in Intune to rotate the device administrator password. Similar to https://www.lieben.nu/liebensraum/2021/06/lightweight-laps-solution-for-intune-mde/
JM 1,161 Reputation points

2024-02-07T12:49:01.34+00:00

Thats correct, Windows LAPS solution via Entra / Intune is the best way forward. I have Implemented it in my multiple organizations and since now its in use and helps us rotate local admin passwords automatically. No need for any scripts, its natively deployed via Intune. I have created a Step-by-step deployment guide on Windows LAPS impementation if it helps: https://cloudinfra.net/implement-laps-with-intune-a-comprehensive-guide/
Shaun Slater 61 Reputation points

2024-02-07T16:45:25.4033333+00:00

Hi Jatin I have read your step-by-step and it looks good but it does not mention what the steps are if we wish to go from LAPS script to LAPS Intune. Do you mind updating the guide or answering on here how we can go from one system to another and test as we go?
Crystal-MSFT 53,241 Reputation points Microsoft External Staff

2024-02-12T05:27:15.11+00:00

@Shaun Slater, Hope things are going well. I am writing to see if the suggestion provide by JatinMakhija can help. If the answer is helpful, please click "Accept Answer". Thanks!

Answer 1

JM 1,161

Thanks for the feedback. If it does not meet your requirement. I suggest you can read MS documentation on migration from Legacy laps to Windows LAPS. Here's the direct link for the same. Hope this helps. https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-scenarios-deployment-migration#migration-scenarios-from-legacy-laps-to-windows-laps-on-existing-devices

Share via

How to migrate from legacy LAPS (LeanLAPS) to Entra LAPS

0 additional answers

Your answer